SP Messenger Privacy Policy
Effective October 16, 2026. Last updated October 18, 2026. Developer: SP Intelligent Systems Oy, Helsinki, Finland (Business ID 3594119‑3).
Summary
SP Messenger is a corporate messenger that connects to your organization's own server. All messages, files, voice messages, call records, call recordings and transcripts are stored on that server only. The app developer does not receive, store or share your data. The app contains no ads, no analytics, no third‑party trackers and does not use cloud push services.
Data controller
The SP Messenger server is deployed and operated by your organization (your employer or another server owner), which acts as the data controller, creates accounts, decides which optional features are enabled (such as call recording and transcription) and sets retention rules. You enter the server address on first launch. Please contact your organization's administrator about your data.
Data processed
- Account data: login, display name, avatar (set by the administrator), password — only its hash is stored on the server.
- Messages and files you send, and read receipts.
- Voice messages you record (up to 10 minutes each). If your organization has enabled transcription, each voice message is automatically converted to text on your organization's server, and the text is stored with the message.
- Call records: participants, time, duration and result. Audio and video travel encrypted between devices (DTLS‑SRTP).
- Call recordings and transcripts — only if your organization has enabled call recording. In that case the audio of audio and video calls is recorded (video is never recorded) and transcribed on your organization's server; the transcript, with speaker names and times, is shown in the chat to the call participants. Both participants see the notice "This call is being recorded" for the whole call. If call recording is disabled, the server does not record calls.
- Technical data: device model and app version (session list), IP address, sign‑in and last activity time, and the history of connections to the server.
- Diagnostic logs: if you choose Send log in the app, a technical log of connection attempts is sent to your organization's server. It does not contain message contents.
Permissions
- Microphone — during calls you start or accept and while you record a voice message.
- Camera — only during video calls you start or accept, and only while your camera is turned on.
- Nearby devices (Bluetooth) — on Android, only to route call audio to your Bluetooth headset. The app does not use it to scan for or locate devices.
- Notifications — for new messages and incoming calls.
- Background operation (foreground service) — to receive messages and calls while the app is minimized or closed; it connects only to your organization's server and shows a permanent "Connected" notification.
- Files — only those you choose to send.
Updates
The Android app from our download page and the Windows app download updates only from your organization's server. The administrator can see which app version each user has and make an Android update mandatory. The Google Play version is updated through Google Play under Google's terms.
Sharing and security
All connections to the server are encrypted (TLS). The app developer does not sell or share data. Retention, backups and deletion of messages, files, recordings, transcripts and logs are defined by the organization that operates the server. Administrators can view usage statistics, connection history and diagnostic logs, temporarily disable an account, and delete an account together with its messages and files.
Your rights
You may request access, correction or deletion of your data from the organization operating the server under the GDPR and applicable law.
Children
The app is intended for workplace communication and is not directed at children.
Developer contact
SP Intelligent Systems Oy, Helsinki, Finland — ceo@spintsys.eu.
For how we process personal data on this website, see our website privacy policy.